Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco unified communications manager 4.2.3sr2 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-2560
The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x does not properly handle idle TCP connections, which allows remote malicious users to cause a denial of service (memory consumption and restart) by making many connections, aka...
Cisco Unified Communications Manager 4.3\\(1\\)Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.2.3sr1Cisco Unified Communications Manager 4.2.3sr2bCisco Unified Communications Manager 4.2.3sr2Cisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.1Cisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2.2Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 4.3
NA
CVE-2014-0736
Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) page in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to hijack the authentication of arbitrary users for reques...
Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 10.0Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.3sr1Cisco Unified Communications Manager 4.2.3sr2Cisco Unified Communications Manager 4.2.3sr2bCisco Unified Communications Manager 4.3Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr2aCisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2.1Cisco Unified Communications ManagerCisco Unified Communications Manager 3.3\\(5\\)sr1Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.2.2
NA
CVE-2008-0027
Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM) 4.2 prior to 4.2(3)SR3 and 4.3 prior to 4.3(1)SR1, and CallManager 4.0 and 4.1 prior to 4.1(3)SR5c, allows remote malicious users to ca...
Cisco Unified Callmanager 4.1Cisco Unified Callmanager 4.0Cisco Unified Communications Manager 4.2.3sr2bCisco Unified Communications Manager 4.3Cisco Unified Callmanager 4.1\\(3\\)sr4Cisco Unified Callmanager 4.1\\(3\\)sr5Cisco Unified Callmanager 4.1\\(3\\)sr5bCisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.2.3sr2
NA
CVE-2014-0734
SQL injection vulnerability in the Certificate Authority Proxy Function (CAPF) implementation in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCum4648...
Cisco Unified Communications Manager 3.3\\(5\\)sr1Cisco Unified Communications Manager 3.3\\(5\\)sr2aCisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 4.2.1Cisco Unified Communications Manager 4.2.2Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.3sr1Cisco Unified Communications ManagerCisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.2.3sr2Cisco Unified Communications Manager 4.3Cisco Unified Communications Manager 10.0Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2.3sr2b
NA
CVE-2014-0742
The Certificate Authority Proxy Function (CAPF) CLI implementation in the CSR management feature in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows local users to read or modify arbitrary files via unspecified vectors, aka Bug ID CSCum95464.
Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.2.1Cisco Unified Communications Manager 10.0Cisco Unified Communications ManagerCisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.2.3sr2bCisco Unified Communications Manager 4.3Cisco Unified Communications Manager 3.3\\(5\\)sr2aCisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.3sr2Cisco Unified Communications Manager 3.3\\(5\\)sr1Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.2.2Cisco Unified Communications Manager 4.2.3sr1
NA
CVE-2014-0731
The administration interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to bypass authentication and read Java class files via a direct request, aka Bug ID CSCum46497.
Cisco Unified Communications Manager 3.3\\(5\\)sr2aCisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.3sr2Cisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.2.1Cisco Unified Communications Manager 4.2.2Cisco Unified Communications Manager 10.0Cisco Unified Communications ManagerCisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1Cisco Unified Communications Manager 4.3Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications Manager 4.2.3sr1Cisco Unified Communications Manager 4.2.3sr2b
NA
CVE-2014-0735
Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum46470.
Cisco Unified Communications ManagerCisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1Cisco Unified Communications Manager 3.3\\(5\\)sr2aCisco Unified Communications Manager 4.3Cisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.2.1Cisco Unified Communications Manager 4.2.2Cisco Unified Communications Manager 10.0Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications Manager 4.2.3sr1Cisco Unified Communications Manager 4.2.3sr2bCisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.3sr2
NA
CVE-2014-0740
Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) interface in the OS Administration component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions allows remote malicious users to hijack the auth...
Cisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.2.1Cisco Unified Communications Manager 4.2.2Cisco Unified Communications ManagerCisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1Cisco Unified Communications Manager 3.3\\(5\\)sr2aCisco Unified Communications Manager 4.3Cisco Unified Communications Manager 10.0Cisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications Manager 4.2.3sr1Cisco Unified Communications Manager 4.2.3sr2bCisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.3sr2
NA
CVE-2014-0732
The Real Time Monitoring Tool (RTMT) web application in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions does not properly enforce authentication requirements, which allows remote malicious users to read application files via a direct request to a U...
Cisco Unified Communications Manager 3.3\\(5\\)sr2aCisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications ManagerCisco Unified Communications Manager 3.3\\(5\\)sr1Cisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.3Cisco Unified Communications Manager 4.2.2Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.3sr1Cisco Unified Communications Manager 4.2.3sr2Cisco Unified Communications Manager 10.0Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2.1Cisco Unified Communications Manager 4.2.3sr2b
NA
CVE-2014-0733
The Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and previous versions does not properly enforce authentication requirements, which allows remote malicious users to read ELM files via a direct request to a URL, aka Bug ID...
Cisco Unified Communications Manager 4.2.1Cisco Unified Communications Manager 4.2.2Cisco Unified Communications Manager 4.2.3Cisco Unified Communications Manager 4.2.3sr1Cisco Unified Communications ManagerCisco Unified Communications Manager 4.1\\(3\\)sr3Cisco Unified Communications Manager 4.2Cisco Unified Communications Manager 4.2.3sr2Cisco Unified Communications Manager 4.3Cisco Unified Communications Manager 3.3\\(5\\)Cisco Unified Communications Manager 3.3\\(5\\)sr1Cisco Unified Communications Manager 3.3\\(5\\)sr2aCisco Unified Communications Manager 4.1\\(3\\)Cisco Unified Communications Manager 4.1\\(3\\)sr1Cisco Unified Communications Manager 10.0Cisco Unified Communications Manager 4.1\\(3\\)sr2Cisco Unified Communications Manager 4.1\\(3\\)sr4Cisco Unified Communications Manager 4.2.3sr2b
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook